Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          cNrIGCjbFZT+BIK+xuYulC/0ReWhlEpqOuldYqGXE4c=
Subject key identifier:   D5:3B:97:4D:72:CF:1D:39:B4:10:C8:9C:8D:0D:6D:FA:CF:42:35:19
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       54E6A82D057BD2F99F66CF158256C3B410A30175
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Wed 06 Dec 2023 20:11:24 +0000
ROA not before:           Wed 06 Dec 2023 20:06:24 +0000
ROA not after:            Wed 04 Dec 2024 20:11:24 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e6:a8:2d:05:7b:d2:f9:9f:66:cf:15:82:56:c3:b4:10:a3:01:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Dec  6 20:06:24 2023 GMT
            Not After : Dec  4 20:11:24 2024 GMT
        Subject: CN=D53B974D72CF1D39B410C89C8D0D6DFACF423519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:76:a7:9f:be:f4:aa:bf:a7:f4:13:0a:52:
                    53:ac:2a:83:ca:a0:68:53:95:42:a7:9b:99:a1:95:
                    f2:d6:ff:6a:ad:30:5d:90:19:51:3c:91:f2:3d:ef:
                    cf:a6:6b:e0:48:82:75:aa:79:59:39:cb:94:ea:a1:
                    b8:65:02:9d:08:73:92:04:35:92:9d:e0:0c:f3:04:
                    cc:a9:85:21:37:25:b8:e2:7c:74:93:7f:1c:87:85:
                    f2:b6:f0:5c:9e:5c:07:dd:71:f9:68:ce:d8:78:62:
                    60:58:75:2b:a9:f4:61:78:76:43:bc:26:56:81:07:
                    c8:f7:ce:04:ca:8c:d4:73:b4:87:e6:40:88:1a:8f:
                    9e:f4:8f:2f:fb:e1:04:62:08:1a:83:8f:0d:94:9f:
                    68:b4:1c:78:38:84:bb:66:2b:79:79:b2:aa:2f:9c:
                    7e:40:65:cd:0c:df:29:9f:5d:88:30:5d:73:97:4a:
                    69:76:94:3f:41:b7:c8:b4:4c:dc:b6:72:16:9e:71:
                    d4:1e:ca:29:5b:06:6b:22:37:ab:01:b0:5b:f4:c4:
                    fa:04:03:7d:64:a2:8c:a5:e0:85:e2:fb:a1:3c:3f:
                    34:9e:a8:5d:45:af:d4:2a:0b:27:8d:6a:2b:10:98:
                    14:df:9f:14:65:2e:19:09:48:39:75:aa:f9:9d:20:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3B:97:4D:72:CF:1D:39:B4:10:C8:9C:8D:0D:6D:FA:CF:42:35:19
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a383630303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         66:93:28:81:06:a8:2a:3c:29:74:5c:46:25:09:43:a4:f6:c3:
         58:9a:0a:d8:3b:e3:02:35:6a:aa:4e:9e:9b:d9:89:56:32:3b:
         31:52:45:3d:dd:4e:45:32:53:c1:f4:19:70:d5:c7:85:86:33:
         2f:74:f9:32:da:b7:5b:75:04:1b:e5:8f:86:29:1f:dd:85:41:
         76:43:68:da:e6:45:cb:e2:20:d6:45:86:30:e2:50:3b:f3:7f:
         66:40:a8:e9:43:f8:cb:88:17:4e:31:b7:75:6a:9c:cb:83:bd:
         cc:3a:38:60:1a:94:db:31:21:93:7b:48:2d:19:02:0d:83:49:
         1d:75:01:d3:d0:20:e7:a0:16:43:02:50:3d:ce:fb:fe:e8:bb:
         c3:c7:a5:dc:81:f8:7e:44:19:42:18:1b:c0:35:00:6b:be:05:
         f4:94:21:e9:f3:cc:eb:4e:01:64:47:05:97:49:1a:df:44:c9:
         53:55:8e:65:14:98:b9:28:77:a6:d0:81:f1:26:34:f5:17:f1:
         c8:71:d1:dc:90:a8:1b:d3:9b:97:35:66:7f:33:43:09:a2:f9:
         2e:57:02:94:f8:41:65:52:fb:cb:51:e6:23:82:bb:56:27:bb:
         ca:4c:e6:34:ff:22:12:db:25:22:03:73:d1:a3:06:fa:72:6d:
         68:97:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org